@team-agent/installer 0.5.49 → 0.5.50

package/crates/team-agent/src/cli/spec.rs

@@ -153,7 +153,7 @@ pub(crate) struct CommandSpec {
 #[rustfmt::skip]
 pub(crate) const COMMAND_SPECS: &[CommandSpec] = &[
     CommandSpec { name: "quick-start", tier: CommandTier::Core, category: CommandCategory::Start, kind: CommandKind::Dispatch(DispatchKind::QuickStart), summary: "start or attach a team from TEAM.md", usage: "usage: team-agent quick-start [TEAMDIR] [--workspace WORKSPACE] [--name NAME] [--team-id TEAM|--team TEAM] [--yes] [--no-display] [--backend tmux|conpty] [--json]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::Conditional, alias_of: None, sunset: None, action: None, governance: None },
-    CommandSpec { name: "send", tier: CommandTier::Core, category: CommandCategory::Daily, kind: CommandKind::Dispatch(DispatchKind::Send), summary: "send a message/task", usage: "usage: team-agent send TARGET MESSAGE... [--workspace WORKSPACE] [--team TEAM] [--targets AGENTS] [--to-name NAME | --to-name agent | --to-name team/agent | --to-name workspace::team/agent] [--pane PANE] [--task TASK] [--sender SENDER] [--watch-result] [--requires-ack|--no-ack] [--no-wait] [--timeout SECONDS] [--confirm-human] [--message-id ID] [--json]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::Conditional, alias_of: None, sunset: None, action: None, governance: None },
+    CommandSpec { name: "send", tier: CommandTier::Core, category: CommandCategory::Daily, kind: CommandKind::Dispatch(DispatchKind::Send), summary: "persist a message for a logical recipient", usage: "usage: team-agent send TO MESSAGE... [--workspace WORKSPACE] [--team TEAM] [--json]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::Conditional, alias_of: None, sunset: Some("next compatibility release"), action: Some("use positional logical TO and the returned message id"), governance: None },
     CommandSpec { name: "status", tier: CommandTier::Core, category: CommandCategory::Daily, kind: CommandKind::Dispatch(DispatchKind::Status), summary: "show current team status", usage: "usage: team-agent status [AGENT] [--workspace WORKSPACE] [--team TEAM] [--summary|--json] [--detail]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: None },
     CommandSpec { name: "collect", tier: CommandTier::Core, category: CommandCategory::Daily, kind: CommandKind::Dispatch(DispatchKind::Collect), summary: "collect reported results", usage: "usage: team-agent collect [--workspace WORKSPACE] [--team TEAM] [--result-file FILE] [--json]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::No, alias_of: None, sunset: None, action: None, governance: None },
     CommandSpec { name: "restart", tier: CommandTier::Core, category: CommandCategory::TeamLifecycle, kind: CommandKind::Dispatch(DispatchKind::Restart), summary: "restart the selected team", usage: "usage: team-agent restart [WORKSPACE] [--team TEAM] [--allow-fresh] [--session-converge-deadline SECONDS] [--json]", default_help: true, command_help: true, suggestion_index: true, token_usage: TokenUsage::Conditional, alias_of: None, sunset: None, action: None, governance: None },

package/crates/team-agent/src/cli/tests/leader_watch.rs

@@ -41,7 +41,7 @@ fn cli_send_persists_real_message_row() {
         workspace: ws.clone(),
         team: None,
         task: None,
-        sender: "leader".to_string(),
+        sender: TrustedSender::leader(),
         no_ack: false,
         no_wait: true,
         watch_result: false,

package/crates/team-agent/src/cli/tests/named_address.rs

@@ -149,7 +149,7 @@ fn named_send_args(
         workspace: ws.to_path_buf(),
         team: None,
         task: None,
-        sender: "leader".to_string(),
+        sender: TrustedSender::leader(),
         no_ack: false,
         no_wait: false,
         watch_result: false,
@@ -459,7 +459,7 @@ fn resolve_app_server_leader_name_fails_closed_on_transport_conflict() {
 
 #[cfg(unix)]
 #[test]
-fn send_to_name_app_server_leader_submits_turn_without_tmux_pane() {
+fn send_to_name_app_server_leader_persists_before_async_delivery() {
     let ws = named_ws("appserver-leader-send");
     let fake = crate::app_server_test_support::FakeAppServer::start(
         "named-send",
@@ -484,11 +484,13 @@ fn send_to_name_app_server_leader_submits_turn_without_tmux_pane() {
     };
 
     assert_eq!(value["ok"], json!(true));
-    assert_eq!(value["transport_kind"], json!("codex_app_server"));
-    assert_eq!(fake.received_turns().len(), 1);
-    assert_eq!(
-        fake.received_turns()[0]["params"]["clientUserMessageId"],
-        value["message_id"]
+    let message_id = value["message_id"].as_str().expect("persisted message id");
+    assert!(message_id.starts_with("msg_"));
+    let store = crate::message_store::MessageStore::open(&ws).unwrap();
+    assert!(store.message_exists(message_id).unwrap());
+    assert!(
+        fake.received_turns().is_empty(),
+        "send returns after persistence; coordinator owns physical delivery"
     );
     let _ = std::fs::remove_dir_all(&ws);
 }

package/crates/team-agent/src/cli/tests/run_delegation.rs

@@ -90,7 +90,7 @@ fn run_dispatches_status_to_handler_returns_ok() {
 
 #[test]
 fn run_dispatches_send_to_handler_returns_ok() {
-    // run([send w1 hello --sender leader --workspace <seeded>]) -> cmd_send -> messaging::send_message
+    // run([send w1 hello --workspace <seeded>]) -> cmd_send -> messaging::send_message
     // -> ok (w1 is an in-team agent) -> ExitCode::Ok. w1 must be seeded: golden refuses non-team targets.
     //
     // OLD seed: flat `{"agents": {"w1": ...}}`.
@@ -112,8 +112,6 @@ fn run_dispatches_send_to_handler_returns_ok() {
         "send".to_string(),
         "w1".to_string(),
         "hello".to_string(),
-        "--sender".to_string(),
-        "leader".to_string(),
         "--workspace".to_string(),
         ws.to_string_lossy().to_string(),
     ];

package/crates/team-agent/src/cli/tests/status_send.rs

@@ -460,7 +460,7 @@ fn send_args_fixture() -> SendArgs {
         workspace: PathBuf::from("."),
         team: Some("teamA".into()),
         task: Some("t-1".into()),
-        sender: "leader".into(),
+        sender: TrustedSender::leader(),
         no_ack: true,
         no_wait: true,
         watch_result: true,
@@ -515,7 +515,7 @@ fn send_options_negates_no_ack_and_no_wait_and_carries_watch() {
         "watch_result flag MUST pass through into SendOptions"
     );
     assert!(!opts.confirm_human);
-    assert_eq!(opts.sender, "leader");
+    assert_eq!(opts.sender.as_str(), "leader");
     assert_eq!(opts.timeout, 12.5);
 }
 
@@ -866,15 +866,8 @@ fn cmd_send_unknown_task_surfaces_golden_error_envelope_not_silent() {
     let _ = std::fs::remove_dir_all(&ws);
 }
 
-// P0 (b') — the SWALLOW guard: `run()` (the CLI process entry) MUST RENDER the send error, not
-// discard Err(CliError) via unwrap_or (advisor %7 root cause). Proxy: emit_cli_error WRITES a
-// `.team/logs/cli-error-*.log` (and prints the compact envelope) — if run() swallowed, neither
-// happens. So a cli-error log containing the BARE "unknown task id: <id>" (no "validation:" prefix)
-// + ExitCode::Error proves run() rendered. Drives the real argv→(exit,render) path.
-// OLD/NEW: same Bug 1/2 seed sync as cmd_send_unknown_task_*; the render-vs-swallow
-// behavior under test is unchanged.
 #[test]
-fn run_send_unknown_task_renders_error_not_silent_swallow() {
+fn run_send_legacy_task_flag_is_internalized_before_persistence() {
     let ws = std::env::temp_dir().join(format!(
         "ta-run-sendunk-{}-{}",
         std::process::id(),
@@ -906,30 +899,21 @@ fn run_send_unknown_task_renders_error_not_silent_swallow() {
     let code = run(&argv, &ws);
     assert_eq!(
         code,
-        ExitCode::Error,
-        "run(send --task <unknown>) must exit Error, not Ok"
-    );
-    // run() must have RENDERED (emit_cli_error wrote the cli-error log); a swallow leaves none.
-    let logs_dir = ws.join(".team").join("logs");
-    let mut found = String::new();
-    if let Ok(entries) = std::fs::read_dir(&logs_dir) {
-        for entry in entries.flatten() {
-            let name = entry.file_name().to_string_lossy().to_string();
-            if name.starts_with("cli-error-") {
-                found = std::fs::read_to_string(entry.path()).unwrap_or_default();
-                break;
-            }
-        }
-    }
-    assert!(
-        found.contains("unknown task id: t-unknown"),
-        "run() must RENDER the send error (cli-error log written with the bare message) — a silent \
-         swallow (unwrap_or discards Err) leaves no log. got log body: {found:?}"
-    );
-    assert!(
-        !found.contains("validation:"),
-        "rendered error must be the bare golden message, NO 'validation:' prefix; got {found:?}"
+        ExitCode::Ok,
+        "legacy --task is sunset-noticed and ignored; public send persists without caller binding"
     );
+    let connection = rusqlite::Connection::open(
+        ws.join(".team").join("runtime").join("team.db"),
+    )
+    .unwrap();
+    let task_id: Option<String> = connection
+        .query_row(
+            "SELECT task_id FROM messages WHERE content = 'go' ORDER BY rowid DESC LIMIT 1",
+            [],
+            |row| row.get(0),
+        )
+        .unwrap();
+    assert_eq!(task_id, None, "caller-supplied task ids must not reach storage");
     let _ = std::fs::remove_dir_all(&ws);
 }
 

package/crates/team-agent/src/cli/types.rs

@@ -312,7 +312,7 @@ pub struct SendArgs {
     pub workspace: PathBuf,
     pub team: Option<String>,
     pub task: Option<String>,
-    pub sender: String,
+    pub sender: TrustedSender,
     pub no_ack: bool,
     pub no_wait: bool,
     pub watch_result: bool,
@@ -323,16 +323,12 @@ pub struct SendArgs {
     /// When set, the store insert uses this id verbatim; a repeat with the same
     /// id returns a `Duplicate` refusal instead of creating a second row.
     pub message_id: Option<String>,
-    /// F1 (0.3.26): `--pane <pane_id>` — direct pane-id targeting. Mutually
-    /// exclusive with `target` / `targets`. When set, the message is injected
-    /// directly into the specified tmux pane via `transport.inject`, bypassing
-    /// the agent-name → pane-id resolution + team-membership check. This is
-    /// the **cross-team communication** primitive: the target pane does not
-    /// need to be in the sender's team.
+    /// Deprecated compatibility input. Public send refuses pane identity and
+    /// requires a logical recipient so persistence always precedes delivery.
     pub pane: Option<String>,
     /// `--to-name <name>` — stable named addressing. Mutually exclusive with
     /// `target` / `targets` / `--pane`; resolves workspace/team/agent or leader
-    /// name to the current live pane before using direct pane injection.
+    /// name before delegating to the persisted message primitive.
     pub to_name: Option<String>,
     /// E7 (0.5.9 host-leader-registry-design): `--to-leader NAME` resolves
     /// NAME through `~/.team-agent/leaders`, canonical-validates, and then

package/crates/team-agent/src/lifecycle/tests/phase_golden.rs

@@ -259,7 +259,7 @@ fn run_phase_golden(spec: PhaseGolden) -> Value {
         workspace: workspace.clone(),
         team: Some(spec.team_key.to_string()),
         task: None,
-        sender: "leader".to_string(),
+        sender: crate::messaging::TrustedSender::leader(),
         no_ack: true,
         no_wait: true,
         watch_result: false,

package/crates/team-agent/src/mcp_server/mod.rs

@@ -88,7 +88,7 @@ use crate::message_store::MessageStore;
 use crate::state::persist::{load_runtime_state, save_runtime_state};
 
 // ── REUSE: step 11 messaging delegate surface ───────────────────────────────
-use crate::messaging::{self, DeliveryOutcome, MessageTarget, SendOptions};
+use crate::messaging::{self, DeliveryOutcome, MessageTarget, SendOptions, TrustedSender};
 
 pub mod helpers;
 pub(crate) mod lifecycle_tools;

package/crates/team-agent/src/mcp_server/tests/send.rs

@@ -155,7 +155,6 @@ fn send_message_worker_recipient_returns_accepted_with_poll_hint() {
         None,
         None,
         None,
-        None,
     );
     match outcome {
         Ok(SendOutcome::WorkerAccepted {
@@ -185,7 +184,6 @@ fn ordinary_send_assign_shape_has_no_recovery_marker() {
             None,
             None,
             None,
-            None,
         )
         .expect("ordinary send ok")
         .to_value();
@@ -240,6 +238,22 @@ fn ordinary_send_assign_shape_has_no_recovery_marker() {
     );
 }
 
+#[test]
+fn send_message_without_framework_identity_fails_closed() {
+    let ws = seed_current_worker_state("missing-sender-identity");
+    let tools = TeamOrchestratorTools::with_identity(&ws, None, Some(TeamKey::new("current")));
+    let error = tools
+        .send_message(
+            &MessageTarget::Single("worker-1".to_string()),
+            "must not be attributed to unknown",
+            None,
+            None,
+            None,
+        )
+        .expect_err("missing framework identity must fail before persistence");
+    assert_eq!(error.reason, ToolErrorReason::McpScopeRefused);
+}
+
 #[test]
 fn recovery_assign_shape_has_structured_marker() {
     let ws = seed_current_worker_state("recovery-marker");
@@ -304,7 +318,6 @@ fn send_message_worker_recipient_surfaces_dead_coordinator_warning() {
             None,
             None,
             None,
-            None,
         )
         .expect("send returns degraded warning, not an MCP error");
     let v = outcome.to_value();
@@ -336,7 +349,6 @@ fn send_message_leader_recipient_is_direct_not_accepted() {
             None,
             None,
             None,
-            None,
         )
         .expect("leader send ok");
     assert!(
@@ -435,7 +447,6 @@ fn send_message_cross_team_peer_surfaces_peer_not_in_scope_error() {
             None,
             None,
             None,
-            None,
         )
         .expect_err("out-of-scope peer must be refused");
     assert_eq!(err.reason, ToolErrorReason::PeerNotInScope);

package/crates/team-agent/src/mcp_server/tests/wire.rs

@@ -66,6 +66,12 @@
         );
         assert_eq!(send["inputSchema"]["additionalProperties"], json!(false));
         assert_eq!(send["inputSchema"]["required"], json!(["to", "content"]));
+        for internal in ["sender", "task_id", "requires_ack"] {
+            assert!(
+                send["inputSchema"]["properties"].get(internal).is_none(),
+                "{internal} is framework-owned, not caller-supplied"
+            );
+        }
     }
 
     #[test]

package/crates/team-agent/src/mcp_server/tools.rs

@@ -17,7 +17,7 @@ use crate::state::persist::{
 };
 
 // ── REUSE: step 11 messaging delegate surface ───────────────────────────────
-use crate::messaging::{self, MessageTarget, SendOptions};
+use crate::messaging::{self, MessageTarget, SendOptions, TrustedSender};
 
 use super::helpers::{
     current_reportable_message_for, delivery_outcome_value, direct_message_attribution_for,
@@ -140,7 +140,6 @@ impl TeamOrchestratorTools {
             Some(task_id),
             None,
             None,
-            None,
         )?;
         let mut ok = compact_tool_result(&out.to_value())?;
         if recovery {
@@ -155,7 +154,7 @@ impl TeamOrchestratorTools {
     }
 
     /// `send_message` (`tools.py:135-183`): C14/C15/C17 scope resolution.
-    ///   - sender = explicit / `TEAM_AGENT_ID` env / `"unknown"` (no candidate scan).
+    ///   - sender = immutable `TEAM_AGENT_ID` captured when the MCP server starts.
     ///   - `requires_ack` defaults from target (`_requires_ack_for_target`).
     ///   - C23 cross-team pre-refusal ([`Self::refuse_cross_team_peer`]) before any
     ///     runtime call.
@@ -168,7 +167,6 @@ impl TeamOrchestratorTools {
         to: &MessageTarget,
         content: &str,
         task_id: Option<&str>,
-        sender: Option<&str>,
         requires_ack: Option<bool>,
         scope_override: Option<Scope>,
     ) -> Result<SendOutcome, ToolError> {
@@ -183,10 +181,14 @@ impl TeamOrchestratorTools {
         if let Some(err) = self.refuse_cross_team_peer(to, None) {
             return Err(err);
         }
-        let sender = sender
-            .and_then(non_empty_string)
-            .or_else(|| self.agent_id.as_ref().map(AgentId::as_str))
-            .unwrap_or("unknown");
+        let sender = self.agent_id.clone().ok_or_else(|| {
+            ToolError::new(
+                ToolErrorReason::McpScopeRefused,
+                "send_message requires framework-injected TEAM_AGENT_ID",
+                "IdentityError",
+            )
+        })?;
+        let sender = TrustedSender::from_runtime_identity(sender);
         let ack = requires_ack.unwrap_or_else(|| requires_ack_for_target(to));
         // C14/C15/C17 scope audit (#230 I-2/I-6 contract): emit mcp.scope_resolved
         // for every worker-origin send before any routing/delivery — the funnel
@@ -197,7 +199,7 @@ impl TeamOrchestratorTools {
                 "mcp.scope_resolved",
                 serde_json::json!({
                     "tool": "send_message",
-                    "sender": sender,
+                    "sender": sender.as_str(),
                     "owner_team_id": canonical_owner_team.as_ref().map(TeamKey::as_str),
                     "to": match to {
                         MessageTarget::Single(t) => serde_json::Value::String(t.clone()),
@@ -213,7 +215,7 @@ impl TeamOrchestratorTools {
         let opts = SendOptions {
             task_id: task_id.map(TaskId::new),
             route_task_id: true,
-            sender: sender.to_string(),
+            sender,
             requires_ack: ack,
             team: canonical_owner_team,
             ..SendOptions::default()

package/crates/team-agent/src/mcp_server/wire.rs

@@ -417,21 +417,6 @@ fn tool_properties(tool: McpTool) -> serde_json::Map<String, Value> {
                 string_property("Target agent id, 'leader', or '*' for broadcast."),
             );
             insert_property(&mut properties, "content", string_property("Message body."));
-            insert_property(
-                &mut properties,
-                "task_id",
-                string_property("Optional task id to associate with the message."),
-            );
-            insert_property(
-                &mut properties,
-                "sender",
-                string_property("Optional sender override."),
-            );
-            insert_property(
-                &mut properties,
-                "requires_ack",
-                boolean_property("Whether the recipient should acknowledge delivery."),
-            );
         }
         McpTool::ReportResult => {
             insert_property(
@@ -609,9 +594,8 @@ pub(crate) fn dispatch_tool(
             let outcome = tools.send_message(
                 &target,
                 content,
-                args.get("task_id").and_then(Value::as_str),
-                args.get("sender").and_then(Value::as_str),
-                args.get("requires_ack").and_then(Value::as_bool),
+                None,
+                None,
                 None,
             )?;
             match outcome {

package/crates/team-agent/src/messaging/mod.rs

@@ -96,6 +96,7 @@ pub use scheduler::{detect_stuck_agents, fire_due_scheduled_events, stuck_cancel
 pub use selftest::{evaluate_idle_behavior, run_comms_selftest, CommsSelftestDriver};
 pub use send::{
     apply_worker_sender_bypass, send_message, session_drift_refusal, MessageTarget, SendOptions,
+    TrustedSender,
 };
 pub use trust::{attempt_trust_auto_answer, TrustAnswerOutcome};
 pub use types::{

package/crates/team-agent/src/messaging/send.rs

@@ -5,7 +5,7 @@ use std::path::Path;
 use crate::coordinator::{CoordinatorHealthStatus, WorkspacePath};
 use crate::event_log::EventLog;
 use crate::model::enums::PaneLiveness;
-use crate::model::ids::{TaskId, TeamKey};
+use crate::model::ids::{AgentId, TaskId, TeamKey};
 use crate::transport::{PaneId, Transport};
 
 use super::helpers::{status_wire, MessageStatusShadow};
@@ -23,6 +23,29 @@ pub enum MessageTarget {
     Fanout(Vec<String>),
 }
 
+/// Sender identity captured from a framework-owned runtime context.
+///
+/// Public CLI/MCP inputs never construct this value from a caller-supplied
+/// string. The wrapper keeps that trust boundary visible throughout delivery
+/// instead of degrading the identity back to an untyped option field.
+#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize)]
+#[serde(transparent)]
+pub struct TrustedSender(AgentId);
+
+impl TrustedSender {
+    pub fn from_runtime_identity(agent_id: AgentId) -> Self {
+        Self(agent_id)
+    }
+
+    pub fn leader() -> Self {
+        Self(AgentId::new("leader"))
+    }
+
+    pub fn as_str(&self) -> &str {
+        self.0.as_str()
+    }
+}
+
 /// `send_message` 选项 (`send.py:36`:Python 大量默认参数 → typed 选项 struct)。
 #[derive(Debug, Clone)]
 pub struct SendOptions {
@@ -31,7 +54,7 @@ pub struct SendOptions {
     /// `task_id` 当真任务校验/路由。**投递/fanout/internal/coordinator** 路径传 `false`
     /// (`internal_delivery.py:44`、`send.py:412/481`),此时 `task_id` 只是标签,**不校验 state.tasks**。
     pub route_task_id: bool,
-    pub sender: String,
+    pub sender: TrustedSender,
     pub requires_ack: bool,
     pub confirm_human: bool,
     pub wait_visible: bool,
@@ -52,7 +75,7 @@ impl Default for SendOptions {
         Self {
             task_id: None,
             route_task_id: true,
-            sender: "leader".to_string(),
+            sender: TrustedSender::leader(),
             requires_ack: true,
             confirm_human: false,
             wait_visible: true,
@@ -95,7 +118,7 @@ pub fn send_message(
                 "leader",
                 content,
                 opts.task_id.as_ref(),
-                &opts.sender,
+                opts.sender.as_str(),
                 opts.requires_ack,
                 None,
                 opts.message_id.as_deref(),
@@ -119,7 +142,7 @@ pub fn send_message(
         }
         MessageTarget::Single(target) => target,
         MessageTarget::Broadcast => {
-            let recipients = broadcast_recipients(&state, &opts.sender, opts.team.as_ref());
+            let recipients = broadcast_recipients(&state, opts.sender.as_str(), opts.team.as_ref());
             return fanout_send(
                 workspace,
                 &state,
@@ -163,13 +186,13 @@ pub fn send_message(
         &state,
         recipient,
         "leader",
-        &opts.sender,
+        opts.sender.as_str(),
         opts.task_id.as_ref(),
         &event_log,
     )? {
         return Ok(outcome);
     }
-    if let Some(outcome) = send_owner_gate_refusal(workspace, &state, &opts.sender)? {
+    if let Some(outcome) = send_owner_gate_refusal(workspace, &state, opts.sender.as_str())? {
         return Ok(outcome);
     }
     if opts.route_task_id {
@@ -206,7 +229,7 @@ pub fn send_message(
         store.create_message_with_id(
             requested,
             task_id,
-            &opts.sender,
+            opts.sender.as_str(),
             recipient,
             content,
             None,
@@ -216,7 +239,7 @@ pub fn send_message(
     } else {
         store.create_message(
             task_id,
-            &opts.sender,
+            opts.sender.as_str(),
             recipient,
             content,
             None,
@@ -690,7 +713,7 @@ fn fanout_send(
     let mut delivered_count = 0usize;
     let mut attempted_count = 0usize;
     for recipient in recipients {
-        if recipient.is_empty() || recipient == &opts.sender {
+        if recipient.is_empty() || recipient == opts.sender.as_str() {
             continue;
         }
         attempted_count = attempted_count.saturating_add(1);
@@ -701,7 +724,7 @@ fn fanout_send(
                 recipient,
                 content,
                 opts.task_id.as_ref(),
-                &opts.sender,
+                opts.sender.as_str(),
                 opts.requires_ack,
                 None,
                 event_log,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@team-agent/installer",
-  "version": "0.5.49",
+  "version": "0.5.50",
   "description": "npx installer for Team Agent",
   "keywords": [
     "codex",
@@ -20,9 +20,9 @@
     "team-agent-installer": "npm/install.mjs"
   },
   "optionalDependencies": {
-    "@team-agent/cli-darwin-arm64": "0.5.49",
-    "@team-agent/cli-darwin-x64": "0.5.49",
-    "@team-agent/cli-linux-x64": "0.5.49"
+    "@team-agent/cli-darwin-arm64": "0.5.50",
+    "@team-agent/cli-darwin-x64": "0.5.50",
+    "@team-agent/cli-linux-x64": "0.5.50"
   },
   "scripts": {
     "postinstall": "node npm/bincheck.mjs",